Last Updated: March 29, 2026
Fire & Flow is a hot yoga studio operated by DLO Professional Services. This policy describes how we collect, use, and protect your information through our mobile application and website at fireandflow.life.
Account Information: Name, email address, phone number, date of birth, pronouns, and password (managed by our authentication provider, Clerk).
Health & Safety Information: Body injury details you report (body region and notes), physical assistance preference, and your signed liability waiver date. This data is encrypted at rest using AES-256-GCM encryption.
Emergency Contact: Name, phone, email, and relationship of your designated emergency contact or parent/guardian (if under 18). This data is encrypted at rest.
Class & Membership Data: Enrollment history, waitlist positions, attendance records, membership type and credits, and class preferences.
Payment Information: Payment method type (card, Apple Pay, Google Pay, Interac, direct deposit, or cash), transaction amounts, and payment status. Card details are processed and stored by Stripe — we never see or store your full card number.
Photos: Your photo release consent preference. If you upload a profile photo, we store the image.
Device & Usage Data: Push notification token (if enabled), notification preferences, and anonymized error reports for app stability.
Social Sign-In: If you sign up via Google, Apple, or Facebook, we receive your name and email from that provider. We do not access your social media posts, friends list, or other account data.
Instructors see your first name, injury details, physical assistance preference, and attendance so they can teach safely.
Clerk (authentication) processes your login credentials and verification codes.
Stripe (payments) processes your payment transactions, governed by Stripe's privacy policy.
Mailgun (email) delivers transactional emails on our behalf.
Other members see only your first name on the community board if you list a class for transfer.
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
Your data is stored in a PostgreSQL database hosted on Railway. All connections use TLS/SSL encryption. Sensitive health information (injuries, emergency contacts) is encrypted at rest using AES-256-GCM encryption. Authentication tokens are stored in your device's secure keychain (iOS Keychain / Android Keystore). All access to personal data by staff is logged and auditable.
The age of majority in British Columbia is 19. Users under 19 must provide a parent or guardian contact during signup. Guardian consent is verified via a token-based email flow. We collect the guardian's name, phone, email, and relationship.
Under PIPEDA (Personal Information Protection and Electronic Documents Act), you have the right to:
We retain your account data for as long as your account is active. If you request deletion, we remove your personal data within 30 days, except where retention is required by law (e.g., payment records for tax purposes).
Our website (fireandflow.life) does not use tracking cookies. The mobile app does not use cookies.
If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information, including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of your personal information.
We do not sell, share, or use your personal information for cross-context behavioral advertising as defined by the CCPA. You may exercise your rights to access or delete your data using the methods described in Section 7 above, or by contacting us at yoga@thevalleyview.ca.
The data types we collect and their purposes are consistent with our declarations in the Google Play Data Safety section and the Apple App Store Privacy Nutrition Label. The following summarizes how our data practices align:
No data is shared with third parties for advertising. All data can be deleted by the user at any time.
We may update this policy from time to time. We will notify you of material changes through the app or by email.
In the event of a medical emergency at the studio, we may share your health information (injury details, emergency contact) with first responders and your designated emergency contact or guardian without additional consent, as permitted by PIPEDA for the protection of health and safety.
Fire & Flow Hot Yoga Studio
Operated by DLO Professional Services
Email: yoga@thevalleyview.ca
Website: fireandflow.life